INFORMATION SYSTEMS SECURITY MANAGER

JOB TITLE INFORMATION SYSTEMS SECURITY MANAGER

NATURE OF JOB FULL TIME

INDUSTRY MANUFACTURING

SALARY KSHS.70,000-100,000

JOB LOCATION MLOLONGO

DUTIES AND RESPONSIBILITIES

Information Security Governance

·       Develop and maintain the Information Security Strategy.

·       Develop and review ICT security policies, standards and procedures.

·       Maintain the Information Security Management Framework.

·       Review security maturity and recommend improvements.

·       Ensure security governance aligns with business objectives.

·       Maintain ICT security documentation.

Cybersecurity

·       Lead the enterprise cybersecurity programme.

·       Coordinate vulnerability assessments and penetration testing.

·       Monitor emerging cyber threats and recommend mitigation.

·       Coordinate security incident response.

·       Review malware, phishing and ransomware protection.

·       Prepare monthly cybersecurity reports.

Firewall & Network Security

·       Administer enterprise firewalls and security appliances.

·       Approve firewall rule requests and conduct periodic rule reviews.

·       Manage VPN security and remote access controls.

·       Manage IDS/IPS policies.

·       Monitor firewall logs and perimeter security events.

·       Review network segmentation and internet security controls.

Endpoint Security

·       Manage Endpoint Detection & Response (EDR).

·       Ensure endpoint encryption and antivirus compliance.

·       Develop endpoint hardening standards.

·       Review endpoint vulnerabilities and coordinate remediation.

·       Monitor endpoint compliance dashboards.

Identity & Access Management

·       Manage identity governance and role-based access control.

·       Approve privileged access requests.

·       Conduct quarterly user access reviews.

·       Enforce password and Multi-Factor Authentication policies.

·       Ensure timely onboarding and offboarding of user accounts.

Risk, Audit & Compliance

·       Maintain the ICT Risk Register.

·       Conduct ICT security risk assessments.

·       Coordinate ICT audits and implement corrective actions.

·       Support regulatory and compliance reviews.

·       Track audit findings to closure.

Business Continuity

·       Support Business Continuity and Disaster Recovery planning.

·       Coordinate Disaster Recovery security testing.

·       Review backup security and ransomware readiness.

·       Security Awareness

·       Develop annual security awareness programmes.

·       Conduct user security training.

·       Coordinate phishing simulations and awareness campaigns.

Vendor Security

·       Assess third-party security controls.

·       Review cloud and hosted service security.

·       Ensure vendor access is controlled and monitored.

Management

·       Prepare departmental budgets and work plans.

·       Provide security advice to management.

·       Supervise security staff where applicable.

·       Participate in ICT management meetings.

KEY REQUIREMENT SKILLS AND QUALIFICATION

·       Degree in Computer Science, Information Technology, Information Systems or related field

·       Minimum 5 years relevant ICT experience & 2 years in information security, infrastructure or ICT governance

·       Strong understanding of information security governance and cybersecurity

·       Knowledge of firewalls, VPNs, IDS/IPS, endpoint security and identity management

·       Knowledge of ICT risk management and compliance

·       Strong analytical and problem-solving skills

HOW TO APPLY

·       If you meet the above qualifications, skills and experience share CV on recruitment@britesmanagement.com

·       Interviews will be carried out on a rolling basis until the position is filled.

·       Only the shortlisted candidates will be contacted.